LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 03-21-2007, 09:44 AM   #1
budword
Member
 
Registered: Apr 2003
Location: Wisconsin
Distribution: Switched to regualr Ubuntu, because I don't like KDE4, at all. Looks like vista on crack.....
Posts: 675

Rep: Reputation: 31
Open file with a link count of less than 1 ?


Hi, hoping someone can tell me if I might have a cracker running about my system. When I run lsof +L1, I get the following output.

COMMAND PID USER FD TYPE DEVICE SIZE NLINK NODE NAME
kio_file 4703 orion 10r REG 3,1 1592776 0 13599186 /var/tmp/kdecache-orion/ksycoca



I've read having an open file with a link count of less than 1 can indicate a cracker hiding his tracks. I'm running Kubuntu Edgy, fully updated. I killed the process with kill -9. So now what do I do ? Anyone have some advice ? Do I have anything to worry about ?

Thanks much...

David

Last edited by budword; 03-21-2007 at 09:49 AM.
 
Old 03-23-2007, 06:37 AM   #2
zulfilee
Member
 
Registered: Apr 2004
Location: India
Distribution: Redhat,Fedora
Posts: 430

Rep: Reputation: 39
The man page says even soockets and fifo will have no link count.
And the file u`ve shown seems to be a socket file.
You can check if the file is present and check the file type with the command

file <filename>
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Listing Files with Specified Link Count jonwatson Programming 5 01-04-2007 12:01 PM
selinux hard link count blues jmjaffe Fedora 1 06-23-2006 12:33 PM
WARNING: Hard link count is wrong for /proc Fr33B5D Linux - General 1 08-30-2005 06:41 PM
Link count value? jch02140 Linux - Newbie 1 07-18-2005 11:44 PM
Word count in paragraph - Open Office, Sutekh Linux - Software 10 04-19-2003 10:27 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 10:07 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration